Encrypt File

Openssl

Encrypt/decrypt file

$ date > date.file

$ openssl aes-256-cbc -in date.file -out date.file.crypt
enter AES-256-CBC encryption password:
Verifying - enter AES-256-CBC encryption password:
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

$ cat date.file.crypt
Salted__�)�w��mx�j��ar�j�$���ɭ(�T�e/i�u�^�

$ openssl aes-256-cbc -d -in date.file.crypt  -out date.file.decrypt
enter AES-256-CBC decryption password:
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

$ cat date.file.decrypt
ter 09 mai 2023 16:30:39 -03

Tar directory

$ tar cf - ./somedir/ | gzip | openssl aes-256-cbc -in - -out - > somedir.tgz.crypt
$ cat somedir.tgz.crypt | openssl aes-256-cbc -d -in - | tar xzvf - -C ./destdir

Tar directory high compression multi-thread

$ export THREADS=$(lscpu | grep "^CPU(s):"| awk '{print $2} ')
$ tar cf - ./somedir/ | pigz -p $THREADS -9  | openssl aes-256-cbc -in - -out - > somedir.tgz.crypt
$ cat somedir.tgz.crypt | openssl aes-256-cbc -d -in - | tar xzvf - -C ./destdir

Tar directory with high compression, multi-thread and splitting output in multiple files

$ export THREADS=$(lscpu | grep "^CPU(s):"| awk '{print $2} ')
$ tar cf - ./somedir/ | pigz -p $THREADS -9  | openssl aes-256-cbc -in - -out - | split -b 256m - somedir.tgz.crypt.
$ cat somedir.tgz.crypt.* | openssl aes-256-cbc -d -in - | tar xzvf - -C ./destdir

Tar directory with high compression, multi-thread, splitting output in multiple files with statistics

$ export SOURCEPATH=./somedir/
$ export SOURCESIZE=$(du -sk $SOURCEPATH |awk '{print $1} ')k
$ export THREADS=$(lscpu | grep "^CPU(s):"| awk '{print $2} ')
$ tar cf - $SOURCEPATH| pv -s $SOURCESIZE |pigz -p $THREADS -9  | openssl aes-256-cbc -salt -e -in - -out - | split -b 256m - somedir.tgz.crypt.
$ cat somedir.tgz.crypt.* | openssl aes-256-cbc -d -in - | tar xzvf - -C ./destdir

Tar directory with high compression, multi-thread, splitting output in multiple files, with statistics and more secure(takes much more time to start)

$ export SOURCEPATH=./somedir/
$ export SOURCESIZE=$(du -sk $SOURCEPATH |awk '{print $1} ')k
$ export THREADS=$(lscpu | grep "^CPU(s):"| awk '{print $2} ')
$ export ITERN=$(expr $(expr $[ $RANDOM % 100 + 100000 ] \* $[ $RANDOM % 10000 + 100 ] + $[ $RANDOM % 10  ]))
$ tar cf - $SOURCEPATH| pv -s $SOURCESIZE |pigz -p $THREADS -9  | openssl aes-256-cbc -iter $ITERN -pbkdf2 -salt -e -in - -out - | split -b 256m - somedir.tgz.crypt.
$ cat somedir.tgz.crypt.* | openssl aes-256-cbc -d -in - | tar xzvf - -C ./destdir